Page 1 of 1

"Return to function" still vulnerable

PostPosted: Fri Feb 16, 2007 2:27 pm
by harrygittens
Hello

2.6.19.2 and latest grsecurity. In config, grsecurity was set to HIGH and no other options touched.

paxtest on kiddie mode, everything was killed except these:
Code: Select all
Return to function (strcpy)              : Vulnerable
Return to function (strcpy, RANDEXEC)    : Vulnerable
Return to function (memcpy)              : Vulnerable
Return to function (memcpy, RANDEXEC)    : Vulnerable

How do I plug these?

thank you

Re: "Return to function" still vulnerable

PostPosted: Mon Feb 19, 2007 11:29 am
by PaX Team
harrygittens wrote:Hello

2.6.19.2 and latest grsecurity. In config, grsecurity was set to HIGH and no other options touched.

paxtest on kiddie mode, everything was killed except these:
Code: Select all
Return to function (strcpy)              : Vulnerable
Return to function (strcpy, RANDEXEC)    : Vulnerable
Return to function (memcpy)              : Vulnerable
Return to function (memcpy, RANDEXEC)    : Vulnerable

How do I plug these?
how about searching the forum next time? there's a reason those tests fail: http://forums.grsecurity.net/viewtopic.php?p=5558

PostPosted: Mon Feb 19, 2007 6:10 pm
by harrygittens
I would if there was a search button ;)

PostPosted: Tue Feb 20, 2007 8:27 pm
by spender
The google search bar above will allow you to search through all the forum posts

-Brad